Directory traversal vulnerability in pm.php in Phorum 5 allows remote authenticated users to include and execute arbitrary local files via directory traversal sequences in the GLOBALS[template] parameter, as demonstrated by injecting PHP sequences into a log file, which is then included by pm.php.
References
Configurations
Configuration 1 (hide)
|
History
07 Nov 2023, 01:59
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2006-07-18 15:46
Updated : 2023-12-10 10:28
NVD link : CVE-2006-3611
Mitre link : CVE-2006-3611
CVE.ORG link : CVE-2006-3611
JSON object : View
Products Affected
phorum
- phorum
CWE